CVE-2025-2884

EUVD-2025-17717
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.6 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensSIMATIC CN 4100
𝑥
< *
ADP
SiemensSIMATIC Field PG M5
𝑥
< *
ADP
SiemensSIMATIC Field PG M6
𝑥
< *
ADP
SiemensSIMATIC IPC BX-32A
𝑥
< V29.01.09
ADP
SiemensSIMATIC IPC BX-39A
𝑥
< V29.01.09
ADP
SiemensSIMATIC IPC BX-56A
𝑥
< V32.01.09
ADP
SiemensSIMATIC IPC BX-59A
𝑥
< V32.01.09
ADP
SiemensSIMATIC IPC MD-57A
𝑥
< V30.01.10
ADP
SiemensSIMATIC IPC PX-32A
𝑥
< V29.01.09
ADP
SiemensSIMATIC IPC PX-39A
𝑥
< V29.01.09
ADP
SiemensSIMATIC IPC PX-39A PRO
𝑥
< V29.01.09
ADP
SiemensSIMATIC IPC RW-528A
𝑥
< V34.01.02
ADP
SiemensSIMATIC IPC RW-548A
𝑥
< V34.01.02
ADP
SiemensSIMATIC IPC227E
𝑥
< *
ADP
SiemensSIMATIC IPC277E
𝑥
< *
ADP
SiemensSIMATIC IPC427E
𝑥
< V21.01.20
ADP
SiemensSIMATIC IPC477E
𝑥
< V21.01.20
ADP
SiemensSIMATIC IPC477E PRO
𝑥
< V21.01.20
ADP
SiemensSIMATIC IPC627E
𝑥
< *
ADP
SiemensSIMATIC IPC647E
𝑥
< *
ADP
SiemensSIMATIC IPC677E
𝑥
< *
ADP
SiemensSIMATIC IPC847E
𝑥
< *
ADP
SiemensSIMATIC ITP1000
𝑥
< *
ADP
SiemensSIPLUS IPC427E
𝑥
< V21.01.20
ADP
Windows Releases
Platform
Version
Windows 11
22H2 (x64)
23H2 (x64)
24H2 (x64)
25H2 (x64)
26H1 (x64)
Windows Server 2022
23H2 Server Core
Windows Server 2025
Server Core
Standard